We evaluate the robustness of our watermark against pruning attacks, in particular against parameter pruning [1]} as conducted in [2]}. In parameter pruning, parameters close to zero are set to zero, which can intentionally or unintentionally affect the effectiveness of the watermark.
